SPECS Project Secure Provisioning of Cloud Services based on SLA Management. SPECS Overview

Size: px

Start display at page:

Download "SPECS Project Secure Provisioning of Cloud Services based on SLA Management. SPECS Overview"

Wesley Harrell
5 years ago
Views:

1 SPECS Project Secure Provisioning of Cloud Services based on SLA Management SPECS Overview

2 Outline n Introduction n Project n Challenges n Security SLAs n Mission n Results n Security SLA n Security Metric Catalogue n Framework n Solution Portfolio n SPECS n Models n Process n Framework 23/02/16 1st Workshop DPSP - Napoli 2

3 SPECS Project CeRICT, Italy (coordinator) TUD, Germany IeAT, Romania CSA, United Kingdom FP7-ICT Project Start: 1/11/2013 Project Type: STREP Duration: 30M Total Funding: 3.5 M EU Contribution: 2.4 M XLAB, Slovenia EISI, Ireland 1st Workshop DPSP - Napoli 3

4 Cloud Security Challenges n CSP Security Assessment n I made a risk assessment; does my CSP offer all the controls I need to meet my security requirement? n Comparison of security offered by CSPs n Many CSPs offer the same functionalities at different costs, how the security changes from one to another? n Monitoring CSP Security n My CSP granted me it is applying a lot of security controls, how can I verify it is true? If a security breach happens, how can I be aware of it? n Data Protection n Do I respect all data protection regulation? Is my privacy respected? 23/02/16 1st Workshop DPSP - Napoli 4

representation of security attributes n quantification of the security level n continuous

5 Security Service level Agreements Security SLAs are contracts among CSP and CSCs regulating the security level granted over provisioned services n Open Challenges: n identification and representation of security attributes n quantification of the security level n continuous monitoring of the fulfillment of the SLAs n automated enforcement 23/02/16 1st Workshop DPSP - Napoli 5

6 SPECS Mission SPECS aims at using Security SLAs to: n negotiate Security among CSC and CSP, enabling Customers to compare CSPs and CSPs to offer security addressing customer specific needs; n automatically enforce Security on services delivered to CSCs according to their requirements. n enable both CSCs and CSPs to monitor security levels and react when security is violated 23/02/16 1st Workshop DPSP - Napoli 6

7 SLA-based cloud Services Negotiate Implement Monitor Remediation Renegotiate Agree on Security Controls and Metrics Activate Security Mechanism Collect Security Metrics measuremnt Identify Violation and apply remedies Change SLA terms 23/02/16 1st Workshop DPSP - Napoli 7

8 SPECS Model Use Cloud Service Develop Customer Developer Manage Use Cloud Service CSP SPECS Owner Broker & Configure 23/02/16 1st Workshop DPSP - Napoli 8

9 SPECS Framework SPECS Application Customer Developer Monitoring Negotiation Enforcement SPECS Owner 9 SLA Platform Enabling Platform 23/02/16 1st Workshop DPSP - Napoli 9

10 Results: Security SLA Model n A Security SLA model and its machine readable format made according to state-ofthe art standards (ISO 19086, WS- Agreement, ) n Security SLA usable according to standard risk modeling processes n Security SLA containing standard and measurable security metrics to offer grants (easy for Providers and verifiable by Customers) 23/02/16 1st Workshop DPSP - Napoli 10

11 Security SLA Model Declarative Measurable 23/02/16 1st Workshop DPSP - Napoli 11

12 Results: Security Metric Catalogue n A Catalogue of security metrics represented according to the latest NIST/ISO standards n More than 20 security metrics defined in SPECS n More than 160 security metrics collected from other projects and standard bodies and represented according to SPECS model 23/02/16 1st Workshop DPSP - Napoli 12

13 Results: SPECS Framework 23/02/16 1st Workshop DPSP - Napoli 13

14 Results: SPECS portfolio n Secure Web Container n A PaaS offering Web servers preconfigured with TLS, protected against DoS and enriched with Software Vulnerability Assessment n STAR Watch n Evaluate and compare CSPs using CSA STAR Repository n E2EE n A Storage Service protected with E2E Encryption n ViPR+SPECS n A CSP datacenter offering Security SLA on top of EMC ViPR solution 23/02/16 1st Workshop DPSP - Napoli 14

15 SPECS impact goals n Support Private and Public Cloud Providers to enhance the security of their service under a signed Security SLA n Support small Private Cloud Providers (the majority in Europe) to offer more security, and negotiable with customers (more flexibility then big CSP) n Improve customers trust in the Cloud 23/02/16 1st Workshop DPSP - Napoli 15

16 Questions? References: SPECS:

Module Shared API and Core Services

Secure Provisioning of Cloud Services based on SLA Management SPECS Project - Deliverable 1.4.1 Module Shared API and Core Services Version 1.1 15 February 2016 The activities reported in this deliverable